|
|
@ -45,40 +45,10 @@ oauth = Blueprint('oauth', __name__)
|
|
|
|
log = logger.create()
|
|
|
|
log = logger.create()
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
'''def github_oauth_required(f):
|
|
|
|
|
|
|
|
@wraps(f)
|
|
|
|
|
|
|
|
def inner(*args, **kwargs):
|
|
|
|
|
|
|
|
if config.config_login_type == constants.LOGIN_OAUTH_GITHUB:
|
|
|
|
|
|
|
|
return f(*args, **kwargs)
|
|
|
|
|
|
|
|
if request.is_xhr:
|
|
|
|
|
|
|
|
data = {'status': 'error', 'message': 'Not Found'}
|
|
|
|
|
|
|
|
response = make_response(json.dumps(data, ensure_ascii=False))
|
|
|
|
|
|
|
|
response.headers["Content-Type"] = "application/json; charset=utf-8"
|
|
|
|
|
|
|
|
return response, 404
|
|
|
|
|
|
|
|
abort(404)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
return inner
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
def google_oauth_required(f):
|
|
|
|
|
|
|
|
@wraps(f)
|
|
|
|
|
|
|
|
def inner(*args, **kwargs):
|
|
|
|
|
|
|
|
if config.config_use_google_oauth == constants.LOGIN_OAUTH_GOOGLE:
|
|
|
|
|
|
|
|
return f(*args, **kwargs)
|
|
|
|
|
|
|
|
if request.is_xhr:
|
|
|
|
|
|
|
|
data = {'status': 'error', 'message': 'Not Found'}
|
|
|
|
|
|
|
|
response = make_response(json.dumps(data, ensure_ascii=False))
|
|
|
|
|
|
|
|
response.headers["Content-Type"] = "application/json; charset=utf-8"
|
|
|
|
|
|
|
|
return response, 404
|
|
|
|
|
|
|
|
abort(404)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
return inner'''
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
def oauth_required(f):
|
|
|
|
def oauth_required(f):
|
|
|
|
@wraps(f)
|
|
|
|
@wraps(f)
|
|
|
|
def inner(*args, **kwargs):
|
|
|
|
def inner(*args, **kwargs):
|
|
|
|
if config.config_oauth_provider:
|
|
|
|
if config.config_login_type == constants.LOGIN_OAUTH:
|
|
|
|
return f(*args, **kwargs)
|
|
|
|
return f(*args, **kwargs)
|
|
|
|
if request.is_xhr:
|
|
|
|
if request.is_xhr:
|
|
|
|
data = {'status': 'error', 'message': 'Not Found'}
|
|
|
|
data = {'status': 'error', 'message': 'Not Found'}
|
|
|
@ -90,15 +60,14 @@ def oauth_required(f):
|
|
|
|
return inner
|
|
|
|
return inner
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
def register_oauth_blueprint(blueprint, show_name):
|
|
|
|
def register_oauth_blueprint(id, show_name):
|
|
|
|
if blueprint.name != "":
|
|
|
|
oauth_check[id] = show_name
|
|
|
|
oauth_check[blueprint.name] = show_name
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
def register_user_with_oauth(user=None):
|
|
|
|
def register_user_with_oauth(user=None):
|
|
|
|
all_oauth = {}
|
|
|
|
all_oauth = {}
|
|
|
|
for oauth in oauth_check.keys():
|
|
|
|
for oauth in oauth_check.keys():
|
|
|
|
if oauth + '_oauth_user_id' in session and session[oauth + '_oauth_user_id'] != '':
|
|
|
|
if str(oauth) + '_oauth_user_id' in session and session[str(oauth) + '_oauth_user_id'] != '':
|
|
|
|
all_oauth[oauth] = oauth_check[oauth]
|
|
|
|
all_oauth[oauth] = oauth_check[oauth]
|
|
|
|
if len(all_oauth.keys()) == 0:
|
|
|
|
if len(all_oauth.keys()) == 0:
|
|
|
|
return
|
|
|
|
return
|
|
|
@ -109,7 +78,7 @@ def register_user_with_oauth(user=None):
|
|
|
|
# Find this OAuth token in the database, or create it
|
|
|
|
# Find this OAuth token in the database, or create it
|
|
|
|
query = ub.session.query(ub.OAuth).filter_by(
|
|
|
|
query = ub.session.query(ub.OAuth).filter_by(
|
|
|
|
provider=oauth,
|
|
|
|
provider=oauth,
|
|
|
|
provider_user_id=session[oauth + "_oauth_user_id"],
|
|
|
|
provider_user_id=session[str(oauth) + "_oauth_user_id"],
|
|
|
|
)
|
|
|
|
)
|
|
|
|
try:
|
|
|
|
try:
|
|
|
|
oauth = query.one()
|
|
|
|
oauth = query.one()
|
|
|
@ -126,8 +95,8 @@ def register_user_with_oauth(user=None):
|
|
|
|
|
|
|
|
|
|
|
|
def logout_oauth_user():
|
|
|
|
def logout_oauth_user():
|
|
|
|
for oauth in oauth_check.keys():
|
|
|
|
for oauth in oauth_check.keys():
|
|
|
|
if oauth + '_oauth_user_id' in session:
|
|
|
|
if str(oauth) + '_oauth_user_id' in session:
|
|
|
|
session.pop(oauth + '_oauth_user_id')
|
|
|
|
session.pop(str(oauth) + '_oauth_user_id')
|
|
|
|
|
|
|
|
|
|
|
|
if ub.oauth_support:
|
|
|
|
if ub.oauth_support:
|
|
|
|
oauthblueprints =[]
|
|
|
|
oauthblueprints =[]
|
|
|
@ -142,30 +111,27 @@ if ub.oauth_support:
|
|
|
|
oauth.active = False
|
|
|
|
oauth.active = False
|
|
|
|
ub.session.add(oauth)
|
|
|
|
ub.session.add(oauth)
|
|
|
|
ub.session.commit()
|
|
|
|
ub.session.commit()
|
|
|
|
'''new_scope = ub.OAuthScope(provider_id=oauth.id, scope="https://www.googleapis.com/auth/plus.me")
|
|
|
|
|
|
|
|
ub.session.add(new_scope)
|
|
|
|
|
|
|
|
ub.session.commit()
|
|
|
|
|
|
|
|
new_scope = ub.OAuthScope(provider_id=oauth.id, scope="https://www.googleapis.com/auth/userinfo.email")
|
|
|
|
|
|
|
|
ub.session.add(new_scope)
|
|
|
|
|
|
|
|
ub.session.commit()'''
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
ele1=dict(provider_name='Github',
|
|
|
|
oauth_ids = ub.session.query(ub.OAuthProvider).all()
|
|
|
|
active=False,
|
|
|
|
ele1=dict(provider_name='github',
|
|
|
|
oauth_client_id=None,
|
|
|
|
id=oauth_ids[0].id,
|
|
|
|
|
|
|
|
active=oauth_ids[0].active,
|
|
|
|
|
|
|
|
oauth_client_id=oauth_ids[0].oauth_client_id,
|
|
|
|
scope=None,
|
|
|
|
scope=None,
|
|
|
|
oauth_client_secret=None,
|
|
|
|
oauth_client_secret=oauth_ids[0].oauth_client_secret,
|
|
|
|
obtain_link='https://github.com/settings/developers')
|
|
|
|
obtain_link='https://github.com/settings/developers')
|
|
|
|
ele2=dict(provider_name='Google',
|
|
|
|
ele2=dict(provider_name='google',
|
|
|
|
active=False,
|
|
|
|
id=oauth_ids[1].id,
|
|
|
|
|
|
|
|
active=oauth_ids[1].active,
|
|
|
|
scope=["https://www.googleapis.com/auth/plus.me", "https://www.googleapis.com/auth/userinfo.email"],
|
|
|
|
scope=["https://www.googleapis.com/auth/plus.me", "https://www.googleapis.com/auth/userinfo.email"],
|
|
|
|
oauth_client_id=None,
|
|
|
|
oauth_client_id=oauth_ids[1].oauth_client_id,
|
|
|
|
oauth_client_secret=None,
|
|
|
|
oauth_client_secret=oauth_ids[1].oauth_client_secret,
|
|
|
|
obtain_link='https://github.com/settings/developers')
|
|
|
|
obtain_link='https://github.com/settings/developers')
|
|
|
|
oauthblueprints.append(ele1)
|
|
|
|
oauthblueprints.append(ele1)
|
|
|
|
oauthblueprints.append(ele2)
|
|
|
|
oauthblueprints.append(ele2)
|
|
|
|
|
|
|
|
|
|
|
|
for element in oauthblueprints:
|
|
|
|
for element in oauthblueprints:
|
|
|
|
if element['provider_name'] == 'Github':
|
|
|
|
if element['provider_name'] == 'github':
|
|
|
|
blueprint_func = make_github_blueprint
|
|
|
|
blueprint_func = make_github_blueprint
|
|
|
|
else:
|
|
|
|
else:
|
|
|
|
blueprint_func = make_google_blueprint
|
|
|
|
blueprint_func = make_google_blueprint
|
|
|
@ -177,36 +143,10 @@ if ub.oauth_support:
|
|
|
|
)
|
|
|
|
)
|
|
|
|
element['blueprint']=blueprint
|
|
|
|
element['blueprint']=blueprint
|
|
|
|
app.register_blueprint(blueprint, url_prefix="/login")
|
|
|
|
app.register_blueprint(blueprint, url_prefix="/login")
|
|
|
|
element['blueprint'].backend = OAuthBackend(ub.OAuth, ub.session, user=current_user, user_required=True)
|
|
|
|
element['blueprint'].backend = OAuthBackend(ub.OAuth, ub.session, str(element['id']),
|
|
|
|
|
|
|
|
user=current_user, user_required=True)
|
|
|
|
if element['active']:
|
|
|
|
if element['active']:
|
|
|
|
register_oauth_blueprint(element['blueprint'], element['provider_name'])
|
|
|
|
register_oauth_blueprint(element['id'], element['provider_name'])
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
'''github_blueprint = make_github_blueprint(
|
|
|
|
|
|
|
|
client_id=config.config_github_oauth_client_id,
|
|
|
|
|
|
|
|
client_secret=config.config_github_oauth_client_secret,
|
|
|
|
|
|
|
|
redirect_to="oauth.github_login")
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
google_blueprint = make_google_blueprint(
|
|
|
|
|
|
|
|
client_id=config.config_google_oauth_client_id,
|
|
|
|
|
|
|
|
client_secret=config.config_google_oauth_client_secret,
|
|
|
|
|
|
|
|
redirect_to="oauth.google_login",
|
|
|
|
|
|
|
|
scope=[
|
|
|
|
|
|
|
|
"https://www.googleapis.com/auth/plus.me",
|
|
|
|
|
|
|
|
"https://www.googleapis.com/auth/userinfo.email",
|
|
|
|
|
|
|
|
]
|
|
|
|
|
|
|
|
)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
app.register_blueprint(google_blueprint, url_prefix="/login")
|
|
|
|
|
|
|
|
app.register_blueprint(github_blueprint, url_prefix='/login')
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
github_blueprint.backend = OAuthBackend(ub.OAuth, ub.session, user=current_user, user_required=True)
|
|
|
|
|
|
|
|
google_blueprint.backend = OAuthBackend(ub.OAuth, ub.session, user=current_user, user_required=True)'''
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
'''if config.config_login_type == constants.LOGIN_OAUTH_GITHUB:
|
|
|
|
|
|
|
|
register_oauth_blueprint(github_blueprint, 'GitHub')
|
|
|
|
|
|
|
|
if config.config_login_type == constants.LOGIN_OAUTH_GOOGLE:
|
|
|
|
|
|
|
|
register_oauth_blueprint(google_blueprint, 'Google')'''
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
@oauth_authorized.connect_via(oauthblueprints[0]['blueprint'])
|
|
|
|
@oauth_authorized.connect_via(oauthblueprints[0]['blueprint'])
|
|
|
@ -222,7 +162,7 @@ if ub.oauth_support:
|
|
|
|
|
|
|
|
|
|
|
|
github_info = resp.json()
|
|
|
|
github_info = resp.json()
|
|
|
|
github_user_id = str(github_info["id"])
|
|
|
|
github_user_id = str(github_info["id"])
|
|
|
|
return oauth_update_token(blueprint, token, github_user_id)
|
|
|
|
return oauth_update_token(str(oauthblueprints[0]['id']), token, github_user_id)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
@oauth_authorized.connect_via(oauthblueprints[1]['blueprint'])
|
|
|
|
@oauth_authorized.connect_via(oauthblueprints[1]['blueprint'])
|
|
|
@ -238,17 +178,16 @@ if ub.oauth_support:
|
|
|
|
|
|
|
|
|
|
|
|
google_info = resp.json()
|
|
|
|
google_info = resp.json()
|
|
|
|
google_user_id = str(google_info["id"])
|
|
|
|
google_user_id = str(google_info["id"])
|
|
|
|
|
|
|
|
return oauth_update_token(str(oauthblueprints[1]['id']), token, google_user_id)
|
|
|
|
|
|
|
|
|
|
|
|
return oauth_update_token(blueprint, token, google_user_id)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
def oauth_update_token(provider_id, token, provider_user_id):
|
|
|
|
def oauth_update_token(blueprint, token, provider_user_id):
|
|
|
|
session[provider_id + "_oauth_user_id"] = provider_user_id
|
|
|
|
session[blueprint.name + "_oauth_user_id"] = provider_user_id
|
|
|
|
session[provider_id + "_oauth_token"] = token
|
|
|
|
session[blueprint.name + "_oauth_token"] = token
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
# Find this OAuth token in the database, or create it
|
|
|
|
# Find this OAuth token in the database, or create it
|
|
|
|
query = ub.session.query(ub.OAuth).filter_by(
|
|
|
|
query = ub.session.query(ub.OAuth).filter_by(
|
|
|
|
provider=blueprint.name,
|
|
|
|
provider=provider_id,
|
|
|
|
provider_user_id=provider_user_id,
|
|
|
|
provider_user_id=provider_user_id,
|
|
|
|
)
|
|
|
|
)
|
|
|
|
try:
|
|
|
|
try:
|
|
|
@ -257,7 +196,7 @@ if ub.oauth_support:
|
|
|
|
oauth.token = token
|
|
|
|
oauth.token = token
|
|
|
|
except NoResultFound:
|
|
|
|
except NoResultFound:
|
|
|
|
oauth = ub.OAuth(
|
|
|
|
oauth = ub.OAuth(
|
|
|
|
provider=blueprint.name,
|
|
|
|
provider=provider_id,
|
|
|
|
provider_user_id=provider_user_id,
|
|
|
|
provider_user_id=provider_user_id,
|
|
|
|
token=token,
|
|
|
|
token=token,
|
|
|
|
)
|
|
|
|
)
|
|
|
@ -272,9 +211,9 @@ if ub.oauth_support:
|
|
|
|
return False
|
|
|
|
return False
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
def bind_oauth_or_register(provider, provider_user_id, redirect_url):
|
|
|
|
def bind_oauth_or_register(provider_id, provider_user_id, redirect_url):
|
|
|
|
query = ub.session.query(ub.OAuth).filter_by(
|
|
|
|
query = ub.session.query(ub.OAuth).filter_by(
|
|
|
|
provider=provider,
|
|
|
|
provider=provider_id,
|
|
|
|
provider_user_id=provider_user_id,
|
|
|
|
provider_user_id=provider_user_id,
|
|
|
|
)
|
|
|
|
)
|
|
|
|
try:
|
|
|
|
try:
|
|
|
@ -311,7 +250,7 @@ if ub.oauth_support:
|
|
|
|
try:
|
|
|
|
try:
|
|
|
|
oauths = query.all()
|
|
|
|
oauths = query.all()
|
|
|
|
for oauth in oauths:
|
|
|
|
for oauth in oauths:
|
|
|
|
status.append(oauth.provider)
|
|
|
|
status.append(int(oauth.provider))
|
|
|
|
return status
|
|
|
|
return status
|
|
|
|
except NoResultFound:
|
|
|
|
except NoResultFound:
|
|
|
|
return None
|
|
|
|
return None
|
|
|
@ -366,7 +305,7 @@ if ub.oauth_support:
|
|
|
|
account_info = github.get('/user')
|
|
|
|
account_info = github.get('/user')
|
|
|
|
if account_info.ok:
|
|
|
|
if account_info.ok:
|
|
|
|
account_info_json = account_info.json()
|
|
|
|
account_info_json = account_info.json()
|
|
|
|
return bind_oauth_or_register(oauthblueprints[0]['blueprint'].name, account_info_json['id'], 'github.login')
|
|
|
|
return bind_oauth_or_register(oauthblueprints[0]['id'], account_info_json['id'], 'github.login')
|
|
|
|
flash(_(u"GitHub Oauth error, please retry later."), category="error")
|
|
|
|
flash(_(u"GitHub Oauth error, please retry later."), category="error")
|
|
|
|
return redirect(url_for('web.login'))
|
|
|
|
return redirect(url_for('web.login'))
|
|
|
|
|
|
|
|
|
|
|
@ -374,7 +313,7 @@ if ub.oauth_support:
|
|
|
|
@oauth.route('/unlink/github', methods=["GET"])
|
|
|
|
@oauth.route('/unlink/github', methods=["GET"])
|
|
|
|
@login_required
|
|
|
|
@login_required
|
|
|
|
def github_login_unlink():
|
|
|
|
def github_login_unlink():
|
|
|
|
return unlink_oauth(oauthblueprints[0]['blueprint'].name)
|
|
|
|
return unlink_oauth(oauthblueprints[0]['id'])
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
@oauth.route('/login/google')
|
|
|
|
@oauth.route('/login/google')
|
|
|
@ -385,7 +324,7 @@ if ub.oauth_support:
|
|
|
|
resp = google.get("/oauth2/v2/userinfo")
|
|
|
|
resp = google.get("/oauth2/v2/userinfo")
|
|
|
|
if resp.ok:
|
|
|
|
if resp.ok:
|
|
|
|
account_info_json = resp.json()
|
|
|
|
account_info_json = resp.json()
|
|
|
|
return bind_oauth_or_register(oauthblueprints[1]['blueprint'].name, account_info_json['id'], 'google.login')
|
|
|
|
return bind_oauth_or_register(oauthblueprints[1]['id'], account_info_json['id'], 'google.login')
|
|
|
|
flash(_(u"Google Oauth error, please retry later."), category="error")
|
|
|
|
flash(_(u"Google Oauth error, please retry later."), category="error")
|
|
|
|
return redirect(url_for('web.login'))
|
|
|
|
return redirect(url_for('web.login'))
|
|
|
|
|
|
|
|
|
|
|
|